Bug#726393: general: Possible malware infections in source packages
On Fri, 18 Oct 2013, Thorsten Glaser wrote:
> On Tue, 15 Oct 2013, Thijs Kinkhorst wrote:
> > I'm still not sure why the virus contained in the source could not be
> > replaced by the EICAR test signature.
>
> Because it’s not testing a virus scanner, but because the
> specific RFC822 message in question exhibited multiple problems
> in the code, due to the way it’s written/structured.
Then we could just defang it for good, replacing most of the virus
code with crap while preserving the "malformedness".
--
"One disk to rule them all, One disk to find them. One disk to bring
them all and in the darkness grind them. In the Land of Redmond
where the shadows lie." -- The Silicon Valley Tarot
Henrique Holschuh
Reply to: